Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS55286.roa
File:                     AS55286.roa (raw, json)
Hash identifier:          +GCLuV0wS884w8t7fqWkbsuc4+QDXMTTKB+leveh3no=
Subject key identifier:   95:44:A2:47:17:B2:59:C3:A3:C7:4B:6E:45:6D:B1:8F:E1:83:C2:57
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       08C263E89BC09639A2F27EFBA6B031C3049A4402
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS55286.roa
Signing time:             Mon 21 Oct 2024 22:04:45 +0000
ROA not before:           Mon 21 Oct 2024 21:59:45 +0000
ROA not after:            Mon 20 Oct 2025 22:04:45 +0000
asID:                     55286
IP address blocks:        157.254.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c2:63:e8:9b:c0:96:39:a2:f2:7e:fb:a6:b0:31:c3:04:9a:44:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct 21 21:59:45 2024 GMT
            Not After : Oct 20 22:04:45 2025 GMT
        Subject: CN=9544A24717B259C3A3C74B6E456DB18FE183C257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:f9:66:9b:7e:da:88:82:6f:15:97:ab:cf:
                    35:7e:c3:09:d2:98:77:fb:08:aa:02:05:7f:f9:5b:
                    32:a6:d7:81:1b:03:9b:67:15:9c:72:1b:e6:21:1e:
                    3b:fd:9a:88:ca:ce:bf:3f:81:9a:d6:2d:91:51:37:
                    42:ed:63:50:11:02:7b:c4:72:9e:b1:47:f0:ce:de:
                    1c:6b:03:85:78:42:0d:a3:52:36:13:62:80:46:dd:
                    39:a9:43:63:5f:4a:34:d6:ab:7f:1f:8b:92:7c:d1:
                    f5:22:9a:35:42:a4:dd:74:0b:c4:c6:fe:59:aa:12:
                    1a:51:c5:fd:97:ea:d1:17:f9:ef:0e:52:67:ed:18:
                    f4:4e:e1:03:90:ba:c3:80:b2:6b:1b:9b:8e:93:57:
                    e5:9c:72:aa:df:18:66:59:c6:6c:4d:c8:0a:e6:0f:
                    a5:ec:04:c1:dc:63:10:f0:28:65:a9:d0:90:cb:e8:
                    77:09:0b:cc:ff:75:e8:b5:19:4c:7e:c5:d5:89:93:
                    40:86:a9:46:c3:60:f2:62:af:3d:ab:bc:38:58:a0:
                    5d:17:b7:e6:31:c1:29:27:d2:bb:74:2e:d0:c8:88:
                    50:87:6b:a5:ca:be:57:10:b1:73:e3:8f:2c:c1:56:
                    05:88:e3:dd:93:21:24:9b:12:0c:eb:9d:e5:17:6f:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:44:A2:47:17:B2:59:C3:A3:C7:4B:6E:45:6D:B1:8F:E1:83:C2:57
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS55286.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:2d:ea:95:d8:11:55:db:54:26:2a:0f:44:38:64:91:1a:d0:
         e3:cf:ee:a0:06:de:06:17:99:d1:58:2e:73:38:e3:83:4f:67:
         53:a3:6f:a7:4e:b3:6b:d3:4d:ed:7d:6f:b3:83:de:01:d5:21:
         28:f8:3b:37:7a:d6:80:65:ff:5f:f5:0e:d4:2a:75:d3:87:3a:
         79:71:d2:fe:c8:ea:8b:51:c0:76:a7:ff:e1:d8:d1:d1:3c:ae:
         58:40:a0:5f:f9:26:28:71:e6:79:49:00:20:8f:c0:20:0c:ce:
         63:0f:ed:63:c4:db:bb:c2:21:2a:c9:ec:83:e8:dd:a2:68:87:
         d0:82:19:2c:ed:26:20:f6:21:af:3b:d0:54:ee:f7:03:5e:7b:
         22:ff:e3:fa:f3:51:62:de:8d:23:02:29:c3:60:0f:4a:45:95:
         43:ad:cd:07:57:a9:95:2e:3c:4a:44:d0:cc:c9:3e:2f:e7:a6:
         c4:63:73:be:83:06:b8:7b:54:7e:2d:f7:2c:89:aa:82:66:01:
         16:1a:16:cb:10:83:57:a4:32:7f:6f:b9:f8:2c:f4:08:09:98:
         9a:f0:54:73:91:a8:fc:7e:4c:a8:c6:49:12:bd:18:7c:7c:e7:
         82:5c:f7:03:c2:2c:72:a2:52:cc:93:7b:30:2a:64:51:06:33:
         de:fe:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:14 2024 by rpki-client on console-ams.rpki-client.org